Overview

overview

10

Static

static

b599ad4019...31.exe

windows7-x64

10

b599ad4019...31.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    b599ad4019e3af36bb048a2485251ac716f38ebde324a74ca2df93a9f2208031

  • Size

    156KB

  • Sample

    221207-ddkrzahd88

  • MD5

    34af86e371f2c4979ce79c001eb74763

  • SHA1

    a426d0d53a14d072509b60faac07f630baaba92f

  • SHA256

    b599ad4019e3af36bb048a2485251ac716f38ebde324a74ca2df93a9f2208031

  • SHA512

    1a9e7627de5ed52b20eb7e34a022f54b606786b8d49c8f5ba3e1491226e776c70f7550700d45642badc42b188bdc314f90f82d8831b452997915367180ff154d

  • SSDEEP

    3072:gLySNYWrO0VctCPmJIHE+gRyRSIuznLstk4oQZiE7J:TRGPctCrEaRQLpW7

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      b599ad4019e3af36bb048a2485251ac716f38ebde324a74ca2df93a9f2208031

    • Size

      156KB

    • MD5

      34af86e371f2c4979ce79c001eb74763

    • SHA1

      a426d0d53a14d072509b60faac07f630baaba92f

    • SHA256

      b599ad4019e3af36bb048a2485251ac716f38ebde324a74ca2df93a9f2208031

    • SHA512

      1a9e7627de5ed52b20eb7e34a022f54b606786b8d49c8f5ba3e1491226e776c70f7550700d45642badc42b188bdc314f90f82d8831b452997915367180ff154d

    • SSDEEP

      3072:gLySNYWrO0VctCPmJIHE+gRyRSIuznLstk4oQZiE7J:TRGPctCrEaRQLpW7

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks